HP UX 11i v2 Networking Software manual Creating User Accounts, About User Accounts

Creating User Accounts

About User Accounts

A user account is used to control who gains access to the system. Access can be achieved through the CLI (console, telnet, SSH) and SNMP. CLI access is authorized through a password validation. SNMP access is authorized through a community-string validation.

User accounts can be added, deleted, and modified as needed. Up to 15 user accounts are supported. Only user(s) that have the unrestricted ReadWrite permission level can add, delete, and modify user accounts. Each system is preconfigured with 3 factory default user accounts.

Each user account can be administratively enabled and disabled as needed. The user can disable a user account without having to delete it from the system.

Each user account is uniquely identified by an ASCII string that can be up to 20 characters long. No two user accounts can have the same user name.

In order for users to initiate an administration session, the user has to supply login credentials. The credentials supplied depend upon the interface being used.

The access system associates the following key elements:

•Username - Creates a unique username in the system.

•Password

•Community String - Unique string used for the SNMP Network Managers.

•Privilege Level - Allows combinations of different privileges.

The CLI uses username and password. Granular access rights are given by privilege level.

Understanding Usernames and Passwords

CLI users enter standard username and password information to begin a CLI session. By default, you may log on as one of three users: super, admin, or guest. The user names are shown in the table below.

Table 6-6 Default User Names, Passwords and Privileges

User Name	Passwords
super	By default, the password is “super”. The
	default community string is “secret”.

privileges

The super user has unrestricted privileges. Use this account to manage any part of the system. This user may view and modify a configuration, as well as administer user accounts and access privileges. This user configures the console and management ports for initial chassis setup.

admin	By default, the password is “admin”. The
	default community string is “private”.

The admin user has general read-write privileges. This user may view and modify the current configuration. However, the admin user can change only its own user information, such as the admin password.

guest (disabled by	The default password is “guest”. The
default)	default community string is “public”.

The guest user has read-only privileges. This user may only view the current configuration. The guest user cannot make any changes during the CLI session.

Setting or Changing a Password

1.Log in to the CLI as a super user. Use the default username and password if they have not already been changed (refer to (page 100)).

2.Enter the privileged-user mode.

3.Enter the global-configuration mode.

100 Administration and Management